Canvas Learning Management System Offline Due to Instructure Compromise

Severity: Medium (Score: 48.9)

Sources: it.umd.edu, Foxbaltimore, Tech.Asu.Edu

Summary

On May 7, 2026, Canvas, the learning management system owned by Instructure, was taken offline following a security compromise affecting all institutions using the platform. The University of Maryland, College Park (UMD) is among those impacted, though there is no indication of a compromise of UMD's internal systems. Instructure is currently investigating the breach and has not provided a timeline for when Canvas will be restored. Additionally, an unrelated Wi-Fi network interruption occurred at UMD around 4 p.m. on the same day, caused by a configuration error, which has since been resolved. Instructure is updating its status website with information regarding the outage. Key Points: • Canvas is offline due to a security compromise at Instructure, affecting multiple institutions. • There is no evidence of a compromise within UMD's systems, but Canvas remains unavailable. • A separate Wi-Fi outage at UMD was caused by a configuration error, not related to the Canvas incident.

Key Entities

• Data Breach (attack_type)
• Instructure (company)
• asu.instructure.com (domain)
• canvas.asu.edu (domain)